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Claims 

[cl ] 1 . A method of creating a role based access profile for a plurality of related 

computer resources, the method comprising: 

accessing a list of associates for potential use in modeling potential access 
rights for a role; 

receiving a user selection of model associates from the list of associates; 
evaluating existing membership of the model associates in access groups 
related to the plurality of related computer resources; and 
producing the access profile based on the existing membership of the model 
associates in the access groups, the access profile corresponding to the role. 

[c2] 2. The method of claim 1 wherein the evaluating of the existing membership of 

the model associates further comprises determining whether commonality of 
membership in an access group at least meets a specific threshold value. 

[c3] 3. The method of claim 2 wherein the specific threshold value is received as 

user input. 

[c4] 4. The method of claim 1 wherein the list of associates is accessed based on 

user input of at least one selection criteria and the receiving of the user 
selection of model associates is accomplished at least in part by presenting the 
list of associates to a user and receiving a user selection from the list. 

[c5] 5. The method of claim 4 wherein the at least one selection criteria comprises a 

hierarchy code parameter. 

[c6] 6. The method of claim 2 wherein the list of associates is accessed based on 

user input of at least one selection criteria and the receiving of the user 
selection of model associates is accomplished at least In part by presenting the 
list of associates to a user and receiving a user selection from the list. 

[c7] 7. The method of claim 6 wherein the at least one selection criteria comprises a 

hierarchy code parameter. 



[c8] 



8. The method of claim 3 wherein the list of associates is accessed based on 
user input of at least one selection criteria and the receiving of the user 
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selection of model associates is accomplished at least In part by presenting the 
list of associates to a user and receiving a user selection from the list. 

[c9] 9. The method of claim 8 wherein the at least one selection criteria comprises a 

hierarchy code parameter. 

[ci 0] 1 0. A computer program product comprising a computer program for creating 

role based access profiles for a plurality of related computer resources, the 
computer program further comprising: 

instructions for accessing a list' of associates for potential use in modeling 
potential access rights for a role; 

instructions for receiving a user selection of model associates from the list of 
associates; 

instructions for evaluating existing membership of the model associates in 
access groups related to the plurality of related computer resources; and 
instructions for producing an access profile based on the existing membership 
of the model associates in the access groups, the access profile corresponding 
to the role. 

[ci 1] 11. The computer program product of claim 1 0 wherein the instructions for 

evaluating existing membership of the model associates further comprise 
instructions for determining whether commonality of membership in an access 
group at least meets a specific threshold value. 

[ci 2] 1 2. The computer program product of claim 1 1 wherein the specific threshold 

value is received as user input. 

[cl 3] 1 3. The computer program product of claim 1 0 wherein the list of associates is 

accessed based on user input of at least one selection criteria and the 
instructions for receiving the user selection of rriodel associates further 
comprise instructions for presenting the list of associates to a user and 
receiving a user selection from the list. 

[cl 4] 1 4. The computer program product of claim 1 3 wherein the at least one 

selection criteria comprises a hierarchy code parameter. 
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[ci 5] 1 5. The computer program product of claim 1 1 wherein the list of associates is 

accessed based on user input of at least one selection criteria and the 
instructions for receiving the user selection of model associates further 
comprise instructions for presenting the list of associates to a user and 
receiving a user selection from the list. 

[cl 6] 1 6. The computer program product of claim 1 5 wherein the at least one 

selection criteria comprises a hierarchy code parameter. 

[cl 7] 1 7. The computer program product of claim 1 2 wherein the list of associates is 

accessed based on user input of at least one selection criteria and the 
instructions for receiving the user selection of model associates further 
comprise instructions for presenting the list of associates to a user and ^ 
receiving a user selection from the list. 

[cl 8] 1 8. The computer program product of claim 1 7 wherein the at least one 

selection criteria comprises a hierarchy code parameter. 

[cl 9] 1 9. Apparatus for creating role based access profiles for a plurality of related 

computer resources, the apparatus comprising: 

means for accessing a list of associates for potential use in modeling potential 
access rights for a role; 

means for receiving a user selection of model associates from the list of 
associates; 

means for evaluating existing membership of the model associates in access 

groups related to the plurality of related computer resources; and 

means for producing an access profile based on the existing membership of the 

model associates in the access groups, the access profile corresponding to the 

role. 

[c20] 20. The apparatus of claim 1 9 further comprising means for receiving user 

input of a threshold value for use in evaluating existing membership of the 
model associates in access groups related to the plurality of related computer 
resources. 

[c21] 21. The apparatus of claim 1 9 further comprising means for implementing the 
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role based on the access profile. 

[c22] 22. The apparatus of claim 20 further comprising means for implementing the 

role based on the ccess profile. 

[c23] 23. A system for creating role based access profiles for a plurality of related 

computer resources, the system comprising: 

a database of access group information for the plurality of relate computer 
resources; and 

a processing platform operatively connected to the database, the processing 
platform operable to cause the system to access the database, receive a user 
selection of model associates, and evaluate existing membership of the model 
associates in access groups to produce the role based access profile. 

[c24] 24. The system of claim 23 further comprising a network connection for 

updating the database. 

[c25] 25. The system of claim 24 wherein the system is further operable to forward 

the role based access profile over the network connection. 

[c26] 26. The system of claim 24 wherein the database further comprises hierarchy 

information. 

[c27] 27, The system of claim 23 wherein evaluating existing membership of the 

model associates in an access group is accomplished at least in part by 
determining whether commonality of membership in the access group at least 
meets a specific threshold value. 

[c28] 28. The system of claim 27 wherein the specific threshold value is received as 

user input. 

[c29] 29. The system of claim 24 wherein evaluating existing membership of the 

model associates in an access group is accomplished at least in part by 
determining whether commonality of membership in the access group at least 
meets a specific threshold value. 



[c30] 



30. The system of claim 29 wherein the specific threshold value is received as 
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[c31] 

[c32] 
[c33] 

[c34] 



user input. 

31. The system of claim 25 wherein evaluating existing membership of the 
model associates In an access group is accomplished at least in part by 
determining whether commonality of membership in the access group at least 
meets a specific threshold value. 

32. The system of claim 31 wherein the specific threshold value is received as 
user input. 

33. The system of claim 26 wherein evaluating existing membership of the 
model associates In an access group is accomplished at least in part by 
determining whether commonality of membership in the access group at least 
meets a specific threshold value. 

34. The system of claim 33 wherein the specific threshold value is received as 
user input. 
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